[ Vendor · 4 CVEs ]
mauriceboe
CVEs affecting mauriceboe published in the last 30 days, plus any mauriceboe CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77293 | 24 Sep 2026 | CVSS 7.1 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an… | |
| CVE-2026-77294 | 24 Sep 2026 | CVSS 8.1 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the… | |
| CVE-2026-77320 | 24 Sep 2026 | CVSS 5.3 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes… | |
| CVE-2026-77321 | 24 Sep 2026 | CVSS 4.3 | mauriceboe TREKTREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP… |